Abstract:We study secure and undetectable communication in a world where governments can read all encrypted communications of citizens. We consider a world where the only permitted communication method is via a government-mandated encryption scheme, using government-mandated keys. Citizens caught trying to communicate otherwise (e.g., by encrypting strings which do not appear to be natural language plaintexts) will be arrested. The one guarantee we suppose is that the government-mandated encryption scheme is semantically secure against outsiders: a perhaps advantageous feature to secure communication against foreign entities. But what good is semantic security against an adversary that has the power to decrypt? Even in this pessimistic scenario, we show citizens can communicate securely and undetectably. Informally, there is a protocol between Alice and Bob where they exchange ciphertexts that look innocuous even to someone who knows the secret keys and thus sees the corresponding plaintexts. And yet, in the end, Alice will have transmitted her secret message to Bob. Our security definition requires indistinguishability between unmodified use of the mandated encryption scheme, and conversations using the mandated encryption scheme in a modified way for subliminal communication. Our topics may be thought to fall broadly within the realm of steganography: the science of hiding secret communication in innocent-looking messages, or cover objects. However, we deal with the non-standard setting of adversarial cover object distributions (i.e., a stronger-than-usual adversary). We leverage that our cover objects are ciphertexts of a secure encryption scheme to bypass impossibility results which we show for broader classes of steganographic schemes. We give several constructions of subliminal communication schemes based on any key exchange protocol with random messages (e.g., Diffie-Hellman).

Warp2: A Method of Email and Messaging with Encrypted Addressing and Headers

Secure Email Transmission Protocols -- A New Architecture Design

Serverless Electronic Mail

An End-to-end User Two-Way Authenticated Double Encrypted Messaging Scheme Based on Hybrid RSA for the Future Internet Architectures.

SafeEmail A safe and reliable email communication system without any spam

Mitigating TLS compromise with ECDHE and SRP

A Secure Communication Scheme for Corporate and Defense Community

Preventing EFail Attacks with Client-Side WebAssembly: The Case of Swiss Post's IncaMail

SendingNetwork: Advancing the Future of Decentralized Messaging Networks

A framework for securing email entrances and mitigating phishing impersonation attacks

ARSecure: A Novel End-to-End Encryption Messaging System Using Augmented Reality

"We're on the Same Page": A Usability Study of Secure Email Using Pairs of Novice Users

A Certificateless One-Way Group Key Agreement Protocol for End-to-End Email Encryption

One Protocol to Rule Them All? On Securing Interoperable Messaging

Android File And Message Encrypted Application Using Advanced Encryption Standard-Vigenere and Electronic Codebook/ Public Key Cryptography Standards/Padding a Hybrid Encryption Algorithm

KeyForge: Mitigating Email Breaches with Forward-Forgeable Signatures

Threat models over space and time: A case study of end‐to‐end‐encrypted messaging applications

The Motivated Can Encrypt (Even with PGP)

How to Subvert Backdoored Encryption: Security Against Adversaries that Decrypt All Ciphertexts

HexE -- Securing Audio Contents in Voice Chat using Puzzle and Timestamp

InfoGuard: A Design and Usability Study of User-Controlled Application-Independent Encryption for Privacy-Conscious Users